Attackers Exploit Critical Drupal Commerce Core Vulnerability
This brief is machine-written from public headlines and excerpts and has not been reviewed. Check the sources for the full story.
Drupal warns that threat actors are actively exploiting a critical authorization flaw in the Commerce Core module. The vulnerability, tracked as CVE-2026-118539, puts vulnerable online stores at risk of compromise.
Why it matters
Timely identification of active exploits helps security teams prioritize critical patches for web applications and protect core infrastructure from ongoing attacks.
What to do
- Apply available security updates for the affected module promptly.
- Review user permissions and access controls within the platform.
- Monitor system logs for unusual or unauthorized activities.